• Proceedings of the Korean Information Science Society Conference
• /
• 2007.10d
• /
• pp.317-322
• /
• 2007

IPv6 이동성 관리를 위한 기존의 호스트 기반 프로토콜인 Mobile IPv6는 오랜 기간 동안 많은 연구에 의해 표준화되어진 안정적인 기술이지만 실제 상용망에서는 잘 사용이 안되고 있다. 그 이유는 단말의 수정 요구, 과도한 유/무선 자원 사용, 느린 핸드오버 지연시간 등이 있다. 이와 같은 Mobile IPv6의 단점을 극복하기 위하여 개발된 네트워크 기반 이동성 관리 프로토콜인 Proxy Mobile IPv6가 최근에 주목받고 있다. Proxy Mobile IPv6는 단말에서의 이동성 지원을 위한 수정이 필요하지 않으며, 유/무선 자원도 효율적으로 사용하며, 핸드오버 지연시간도 단축된다는 장점을 지니고 있다. 본 논문에서는 Proxy Mobile IPv6와 기존 호스트 기반 프로토콜인 Mobile IPv6, Hierarchical Mobile IPv6를 체계적으로 분석하고 핸드오버 지연시간을 비교 분석한다. 비교 분석 결과로서 Proxy Mobile IPv6는 기존 기법들보다 약 $84{\sim}93%$ 정도의 핸드오버 지연시간 단축이 있음을 알 수 있다.

• Journal of Korea Society of Industrial Information Systems
• /
• v.12 no.3
• /
• pp.47-59
• /
• 2007

IPv4 NAT, which often used in households or under SOHO environments, is one of the factors that delays IPv6 propagation. As IPv4 NAT does not operate properly under the transition mechanism like ISATAP or 6to4 that acts as IPv6-in-IPv4 tunneling type, Microsoft proposed Teredo in order to resolve this issue. However, tunneling transition mechanism like Teredo has a security problem. That is, being tunneled packets have dual IP headers; general firewall systems apply the filtering rules only to the outer header but not inner header when these packets pass the firewall. Furthermore, attacks using unregistered server and relay can take place in Teredo. To resolve these problems, we propose a new packet filtering mechanism exclusively for Teredo. The proposed packet filtering mechanism was designed and implemented by using Linux Netfilter and ip6tables. Through functional and experimental performance tests, this packet filtering system was found operating properly and solving the Teredo packet filtering problems without serious performance degradation.

• Journal of Communications and Networks
• /
• v.17 no.6
• /
• pp.647-655
• /
• 2015

Low-power and lossy networks (LLNs) comprised of thousands of embedded networking devices can be used in a variety of applications, such as smart grid automated metering infrastructures (AMIs) and wireless sensor networks. Connecting these LLNs to the Internet has even greater potential, leading to the emerging concept of the Internet of Things (IoT). With the goal of integrating LLNs into IoT, the IETF has recently standardized RPL and 6LoWPAN to allow the use of IPv6 on LLNs. Although there already exist several studies on the the performance of RPL and embedded IPv6 stack in LLN, performance measurement and characterization of TCP over RPL in multihop LLNs is yet to be studied. In this article, we present a comprehensive experimental study on the performance of TCP over RPL in an embedded IPv6-based LLN running over a 30-node multihop IEEE 802.15.4 testbed network. Our results and findings are aimed at investigating how embedded TCP interoperates with common Linux TCP and underlying RPL (and vice versa), which furthers our understanding of the performance trade-offs when choosing TCP over RPL in IPv6-based LLNs.

• The KIPS Transactions:PartC
• /
• v.17C no.2
• /
• pp.153-158
• /
• 2010

Mobile IPv6 is one of method can keep Mobile node's session. To solve legacy Mobile IPv4's triangular routing problem, in Mobile IPv6, Mobile Node could directly communicate with Correspond node by Binding Update. But, attacker could interfere Return Routability Procedure that is Correspond node check Home address and Care of address reachable. At this result, Attacker is able to hijack Session to correspond node from Mobile node. In This paper, We propose new Binding Update scheme for solving that problem. Our approach is that MN gives association both home token and care of token using onewayness of keyed hash fuction. From security and performance analysis, we can see that proposed binding Update Scheme can achieve stronger security than legacy scheme and at the same time requires minimal computational overhead.

• The KIPS Transactions:PartC
• /
• v.13C no.1 s.104
• /
• pp.113-120
• /
• 2006

A node of mobile IPv6 moving foreign networks needs authentication process to support right services against from security threat. AAA is a trust infrastructure that authenticates, authorizes, and accounts nodes receiving a network service. And Mobile IPv6 Working Group recommends use of AAA infrastructure to authenticate mobile nodes. Event though AAA infrastructure provides strong authentication functions, it should exchange a lot of messages to authenticate mobile nodes every movement. The exchange of lots of messages causes latency and it is interfered with realization of real-time communication. This paper proposes an authentication method of improved speed using hash value of mobile node to reduce authentication latency. Directly after movement, a mobile node applying a Proposed method uses extended existing security authentication for a while and deletes the establishment latency of new security authentication. Performance evaluation of a proposed method verifies the efficiency through the analysis of cost comparison with other methods. The conclusion of performance evaluation is that the proposed method gets more 25% performance improvement than a general method when a mobile node moves another subnet.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.36 no.10B
• /
• pp.1182-1191
• /
• 2011

In this paper, we propose a network-based IP mobility management scheme, called Access Independent Mobile Service with IPv4/IPv6 Dual Stack (AIMS-DS), which can provide high-quality multimedia services to IPv4/IPv6 dual-stack mobile nodes (MNs) without any interruption over various wireless/wired access networks. The proposed scheme provides an MN with a fast and reliable mobility service among heterogeneous wireless access networks through the network-based control, the complete separation method of control and data plane, the cross-layer (layer2 and layer3) interworking method for handover control acceleration, etc, In addition, the proposed AIMS-DS can provide seamless mobility service to an MN under the environments of IPv4/IPv6 coexisting networks through the home address mobility support and transport network support. Through performance evaluation with computer simulations, we have shown the superiority of the proposed AIMS-DS in terms of handover latency, packet 1085 and packet delivery latency.

• The Transactions of the Korea Information Processing Society
• /
• v.4 no.10
• /
• pp.2521-2532
• /
• 1997

The next generation internet protocol, IPv6, have been developed by the IETF according to the requirements of enhancement of classic IP protocols to satisfy the lack of Internet address space as well as the support of multimedia applications. This paper presents an implementation of IPv6 protocols on the Windows NT kernel environment. In this work, we developed and also tested the basic functions, required for operating as an IPv6 host, such as IPv6 header processing, IPv6 address handling, control message processing, group membership processing and neighbor discovery functions. The implemented IPv6 protocol driver module is connected to the lower network interface card through NDIS, a standard network interface. And this driver module that operates within kernel, is implemented as it is connected to upper user applications and lower NDIS using dispatch and lower-edge functions. The developed IPv6 protocol driver can provide not only enhanced performance because it is implemented in kernel mode, but also convenience of usage to the application developers because it gives user interface as a dynamic link library.

• Journal of Information Processing Systems
• /
• v.1 no.1 s.1
• /
• pp.62-69
• /
• 2005

This paper presents a queuing analysis model of a PC-based software router supporting IPv6-IPv4 translation for residential gateway. The proposed models are M/G/1/K or MMPP-2/G/1/K by arrival process of the software PC router. M/G/1/K is a model of normal traffic and MMPP-2/G/1/K is a model of burst traffic. In M/G/1/K, the arriving process is assumed to be a Poisson process, which is independent and identically distributed. In MMPP-2/G/1/K, the arriving process is assumed to be two-state Markov Modulated Poisson Process (MMPP) which is changed from one state to another state with intensity. The service time distribution is general distribution and the service discipline of the server is processor sharing. Also, the total number of packets that can be processed at one time is limited to K. We obtain performance metrics of PC-based software router for residential gateway such as system sojourn time blocking probability and throughput based on the proposed model. Compared to other models, our model is simpler and it is easier to estimate model parameters. Validation results show that the model estimates the performance of the target system.

• ETRI Journal
• /
• v.27 no.6
• /
• pp.798-801
• /
• 2005

This Letter proposes a scheme that supports a fast handover effectively in hierarchical mobile IPv6 networks (F-HMIPv6) by optimizing the associated data and control flows during the handover. By NS-2 simulation, we show that the proposed scheme can give better handover performance than a simple combination of existing schemes.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2003.05b
• /
• pp.1377-1380
• /
• 2003

계층적 모바일 IPv6는 이동 노드의 지역적인 이동시 보다 빠르고 효과적으로 서비스를 제공하기 위하여 네트워치를 계층적으로 구성한 프로토콜로써, 모바일 IPv6의 단점인 핸드오프시의 긴 지연시간을 단축시켜 손실되는 패킷을 줄이며, 외부로 전송되는 트래픽의 양을 감소시키는 장점이 있다. 따라서 많은 양의 데이타 처리가 필요한 멀티미디어 통신이나, 신속한 서비스를 필요로 하는 실시간 통신에 적용이 가능하다. 본 논문에서는 기존의 모바일 IPv6와 계층적 모바일 IPv6를 구현하여 핸드오프 지연시간과 패킷 손실량을 측정하고 성능 비교를 통하여 계층적 모바일 IPv6의 성능 향상을 확인하였다.